Email: 472609 Autolearn: 0 AvgScore: 4.94 AvgScanTime: 1.39 sec Spam: 149900 Autolearn: 0 AvgScore: 15.08 AvgScanTime: 1.53 sec Ham: 322709 Autolearn: 0 AvgScore: 0.23 AvgScanTime: 1.33 sec Time Spent Running SA: 183.02 hours Time Spent Processing Spam: 63.70 hours Time Spent Processing Ham: 119.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142359 89.13 94.97 86.42 2 DKIM_SIGNED 132884 79.87 88.65 75.80 3 RELAYCOUNTRY_US 127643 82.83 85.15 81.75 4 XM_DK_Pass 126574 77.59 84.44 74.40 5 DKIM_VALID 125075 76.55 83.44 73.35 6 XM_B_Unicode 123724 73.55 82.54 69.37 7 DCC_CHECK 114117 50.77 76.13 38.99 8 XM_B_SpammyWords 107096 53.68 71.44 45.43 9 XMListUnsubscribeExists 107015 55.51 71.39 48.14 10 DKIM_VALID_AU 99899 61.34 66.64 58.88 11 LOC_TINY_FONT_1 76472 34.21 51.02 26.41 12 XM_B_Unicode3 76195 44.31 50.83 41.27 13 XM_B_SpammyWords2 64813 26.57 43.24 18.83 14 BAYES_50 63104 54.42 42.10 60.14 15 HTML_FONT_LOW_CONTRAST 58388 31.41 38.95 27.90 16 XM_DK_Undo_02 58165 15.63 38.80 4.86 17 RCVD_IN_MSPIKE_H2 54465 34.16 36.33 33.15 18 FVGT_m_MULTI_ODD 51230 28.05 34.18 25.20 19 T_KAM_HTML_FONT_INVALID 47844 24.28 31.92 20.73 20 BAYES_99 42957 11.09 28.66 2.92 21 DKIM_VALID_EF 42040 28.72 28.05 29.04 22 TR_XM_DKIM_Undo 41368 10.14 27.60 2.04 23 MIME_HTML_ONLY 40551 22.15 27.05 19.88 24 XMSubLong 37637 24.08 25.11 23.60 25 XM_Multi_Part_URI 34575 16.18 23.07 12.98 26 T_TM2_M_HEADER_IN_MSG 33887 27.17 22.61 29.29 27 DCC_CHECK_NEGATIVE 33060 48.62 22.05 60.96 28 BAYES_999 32097 8.27 21.41 2.17 29 TR_DCC_Bayes_99 31259 7.28 20.85 0.97 30 TR_XM_DK_Unsub 30745 14.63 20.51 11.90 31 UNPARSEABLE_RELAY 26367 13.27 17.59 11.26 32 XM_B_Unsub 24213 11.44 16.15 9.24 33 XM_B_SpammyWords3 23823 7.96 15.89 4.27 34 TR_MAX_INTL_RELAY 23236 8.68 15.50 5.50 35 TR_XM_BayesUnsub 22614 9.38 15.09 6.73 36 RELAYCOUNTRY_META 21170 7.04 14.12 3.75 37 LOTS_OF_MONEY 20492 8.55 13.67 6.18 38 TR_XM_SpammyWords4 18162 6.57 12.12 3.99 39 RCVD_IN_BL_SPAMCOP_NET 17477 4.37 11.66 0.98 40 BOTNET_IPINHOSTNAME 17114 5.87 11.42 3.29 41 TR_XM_SpammyWords2 17099 3.88 11.41 0.38 42 TR_XM_SpammyRelay 16242 4.73 10.84 1.90 43 XM_Body_Dirty_Words 15315 4.85 10.22 2.36 44 XM_Evil_Numbers_Gen 14795 9.01 9.87 8.61 45 TR_XM_SPAMCOP 14214 3.41 9.48 0.59 46 BAYES_80 14079 5.28 9.39 3.37 47 BOTNET 13116 3.84 8.75 1.56 48 FSL_BULK_SIG 13043 7.59 8.70 7.08 49 XM_B_Phish_Phrases 12526 6.34 8.36 5.40 50 TR_XM_UnparsRelay 12388 3.60 8.26 1.43 51 BAYES_60 12255 8.39 8.18 8.49 52 LotsOfNums_01 12016 8.30 8.02 8.43 53 HTML_IMAGE_RATIO_02 11162 5.68 7.45 4.86 54 XMSubMetaSx_00 10695 5.09 7.13 4.14 55 MPART_ALT_DIFF 9766 4.90 6.52 4.14 56 XM_H_Long_From01 9384 5.81 6.26 5.61 57 XM_UncommonTLD01 9202 4.89 6.14 4.31 58 XM_B_PhoneNumber 9140 8.82 6.10 10.08 59 BAYES_95 8263 3.20 5.51 2.13 60 XM_H_GMP 7815 5.27 5.21 5.30 61 DKIM_INVALID 7809 3.33 5.21 2.45 62 XM_B_Investor 7694 2.67 5.13 1.53 63 UNTRUSTED_Relay 7648 2.66 5.10 1.53 64 HTML_IMAGE_RATIO_04 7271 4.36 4.85 4.13 65 TR_XM_PhishingBody 7039 2.62 4.70 1.65 66 RELAYCOUNTRY_CA 6903 2.16 4.61 1.03 67 XMSexyCombo_05 6747 2.28 4.50 1.24 68 XM_SPF_SoftFail 6290 2.40 4.20 1.57 69 TM2_M_VERY_LONG_WORD 6241 2.40 4.16 1.58 70 T_XMDrugObfuBody_14 6222 2.50 4.15 1.73 71 XM_B_SpammyTLD 6167 2.97 4.11 2.43 72 MIME_HTML_ONLY_MULTI 5742 2.90 3.83 2.47 73 TooManyTo_001 5708 6.94 3.81 8.39 74 XM_CamelCaseFrm001 5377 2.70 3.59 2.28 75 HTML_IMAGE_RATIO_08 5280 2.51 3.52 2.03 76 XMDiploma_00 5248 2.10 3.50 1.44 77 RCVD_IN_MSPIKE_H3 5245 5.24 3.50 6.04 78 RCVD_IN_MSPIKE_WL 5245 5.24 3.50 6.04 79 XM_OfRef6 5186 1.86 3.46 1.12 80 HTML_IMAGE_RATIO_06 5109 3.27 3.41 3.20 81 RCVD_IN_VALIDITY_RPBL 5088 1.12 3.39 0.06 82 XMNumbers 4948 2.97 3.30 2.82 83 TR_XM_SpammyWords5 4891 1.92 3.26 1.29 84 T_XMDrugObfuBody_08 4706 2.06 3.14 1.56 85 XMStrtUSub 4529 3.95 3.02 4.38 86 MIME_HTML_MOSTLY 4344 2.30 2.90 2.02 87 T_XMDrugObfuBody_00 4263 1.47 2.84 0.83 88 RELAYCOUNTRY_AU 4211 1.33 2.81 0.65 89 T_XMHurry_00 4052 1.27 2.70 0.61 90 TM2_M_URI_OPT_OUT 4030 2.17 2.69 1.93 91 XM_B_URI_Unicode 4021 2.14 2.68 1.89 92 MIME_QP_LONG_LINE 3931 4.34 2.62 5.14 93 FROM_EXCESS_BASE64 3831 1.91 2.56 1.61 94 XM_URI_RBL 3768 1.02 2.51 0.32 95 XM_B_SpammyWords4 3630 1.14 2.42 0.55 96 XM_UB50 3612 1.42 2.41 0.96 97 URI_TRY_3LD 3510 1.26 2.34 0.76 98 TR_XM_NoHeaderRelay 3438 0.87 2.29 0.21 99 T_TooManySym_01 3357 4.62 2.24 5.73 100 SUSP_UTF8_WORD_SUBJ 3347 0.71 2.23 0.01 101 XMStockSpam_06 3345 1.35 2.23 0.94 102 XM_B_Unsub2 3286 1.66 2.19 1.41 103 RCVD_IN_VALIDITY_SAFE 3262 3.74 2.18 4.46 104 DKIM_ADSP_NXDOMAIN 3154 0.85 2.10 0.27 105 SUSP_UTF8_WORD_COMBO 3123 0.68 2.08 0.02 106 SpammyFromTLD_02 3091 0.95 2.06 0.44 107 MAILING_LIST_MULTI 2978 2.84 1.99 3.24 108 XM_DK_Undo_01 2960 1.85 1.97 1.79 109 NO_DNS_FOR_FROM 2953 0.79 1.97 0.25 110 TR_XM_MaxWHORU 2939 0.76 1.96 0.20 111 XM_H_Long_From02 2930 1.43 1.95 1.18 112 USER_IN_DEF_DKIM_WL 2858 9.37 1.91 12.84 113 XMGenDplmaNmb 2722 1.12 1.82 0.80 114 RCVD_IN_ZEN_LASTEXTERNAL 2683 0.57 1.79 0.00 115 SHORTCIRCUIT 2683 0.57 1.79 0.00 116 T_REMOTE_IMAGE 2666 3.09 1.78 3.70 117 XMBrknScrpt_02 2616 1.12 1.75 0.82 118 URI_HEX 2597 1.46 1.73 1.33 119 SpammyFromTLD_01 2497 1.13 1.67 0.88 120 HTML_MIME_NO_HTML_TAG 2450 2.46 1.63 2.84 121 TR_LOTS_OF_MONEY3 2397 0.74 1.60 0.34 122 XM_SendGrid 2392 1.45 1.60 1.38 123 XMBody_78 2367 0.89 1.58 0.57 124 XM_B_COPY_HTML 2303 1.01 1.54 0.77 125 BAYES_40 2256 3.89 1.51 5.00 126 HTML_TAG_BALANCE_BODY 2249 0.92 1.50 0.65 127 TR_XM_INV_DKIM 2247 0.52 1.50 0.06 128 DKIM_ADSP_CUSTOM_MED 2244 1.06 1.50 0.86 129 XMPhish30 2204 0.84 1.47 0.55 130 RCVD_IN_PSBL 2192 0.61 1.46 0.22 131 SUBJ_ALL_CAPS 2183 1.33 1.46 1.27 132 XMBody_17 2124 0.81 1.42 0.52 133 DIET_1 2115 0.66 1.41 0.32 134 RCVD_IN_VALIDITY_CERTIFIED 2097 2.85 1.40 3.52 135 XMBdyGiftCard01 2086 0.81 1.39 0.53 136 TR_XM_PHPForged 2082 0.64 1.39 0.30 137 T_FILL_THIS_FORM_SHORT 2066 1.08 1.38 0.94 138 TR_XM_PHPDW 2063 0.65 1.38 0.31 139 ALL_TRUSTED 2062 10.78 1.38 15.15 140 XM_B_COVIDMETA 2020 0.64 1.35 0.30 141 TR_XM_FormFill2 2019 0.63 1.35 0.30 142 XMSexyCombo_01 2016 0.52 1.34 0.14 143 XM_H_PHPOS 1996 0.62 1.33 0.29 144 TR_XM_Base64_M1 1957 0.75 1.31 0.49 145 BAYES_00 1920 8.41 1.28 11.72 146 XM_B_Phish66 1903 0.64 1.27 0.34 147 NML_ADSP_CUSTOM_MED 1893 0.81 1.26 0.60 148 XM_DIRTYINTL 1883 0.46 1.26 0.09 149 T_MONEY_PERCENT 1882 0.57 1.26 0.25 150 TR_LOTS_OF_MONEY2 1882 0.57 1.26 0.25 151 RCVD_IN_SBL 1878 0.40 1.25 0.00 152 RCVD_IN_SBL_DROP 1843 0.39 1.23 0.00 153 FORGED_GMAIL_RCVD 1756 0.73 1.17 0.53 154 HTTPS_HTTP_MISMATCH 1748 0.91 1.17 0.79 155 SHOPIFY_IMG_NOT_RCVD_SFY 1624 0.51 1.08 0.25 156 BAYES_20 1615 3.03 1.08 3.93 157 XM_ProductURIs 1584 0.85 1.06 0.75 158 RCVD_IN_IADB_LISTED 1579 3.09 1.05 4.03 159 THIS_AD 1571 0.65 1.05 0.46 160 XM_B_SEO 1557 0.50 1.04 0.26 161 XMSubMetaI_00 1492 0.61 1.00 0.43 162 TooManyTo_002 1486 2.31 0.99 2.92 163 RELAYCOUNTRY_FR 1485 0.48 0.99 0.24 164 T_STY_INVIS_DIRECT 1475 0.54 0.98 0.33 165 URI_NOVOWEL 1460 1.45 0.97 1.68 166 TR_XM_RelayPhish 1456 0.35 0.97 0.06 167 RCVD_IN_XBL 1443 0.32 0.96 0.01 168 XMHTML_After_End 1436 0.86 0.96 0.81 169 TR_MetaPhish_Combo_01 1431 0.89 0.95 0.87 170 KHOP_HELO_FCRDNS 1425 1.60 0.95 1.90 171 XMSlimDrugH 1411 0.62 0.94 0.47 172 TR_Symld_Words 1400 1.25 0.93 1.40 173 MPART_ALT_DIFF_COUNT 1395 0.84 0.93 0.80 174 RELAYCOUNTRY_GB 1390 0.63 0.93 0.50 175 PLING_QUERY 1379 0.57 0.92 0.40 176 XM_B_DNDMA 1357 0.76 0.91 0.69 177 RELAYCOUNTRY_RU 1352 0.31 0.90 0.03 178 TooManyTo_003 1350 1.39 0.90 1.62 179 T_Symld_Words_02 1348 0.73 0.90 0.65 180 TR_XM_SEO4 1327 0.36 0.89 0.12 181 XM_H_Undi_Recip 1326 0.40 0.88 0.18 182 MISSING_HEADERS 1326 0.59 0.88 0.45 183 RCVD_IN_IADB_SPF 1313 2.71 0.88 3.56 184 XMPhish08 1308 0.45 0.87 0.25 185 LongTLD 1306 0.55 0.87 0.40 186 RDNS_DYNAMIC 1303 0.53 0.87 0.37 187 URIBL_BLACK 1302 0.31 0.87 0.05 188 TooManyTo_004 1283 1.07 0.86 1.17 189 RCVD_IN_SBL_CSS 1269 0.29 0.85 0.04 190 XM_UB99 1263 0.27 0.84 0.00 191 PDS_RDNS_DYNAMIC_FP 1262 0.42 0.84 0.22 192 TR_XM_InvalidRelay 1256 0.28 0.84 0.01 193 TooManyTo_005 1251 0.91 0.83 0.94 194 RCVD_IN_IADB_DK 1245 2.35 0.83 3.06 195 XMPhish14 1223 0.55 0.82 0.43 196 RCVD_IN_IADB_SENDERID 1217 2.42 0.81 3.17 197 XMSubMetaSxObfu_03 1214 0.49 0.81 0.34 198 XMReplyNow 1205 0.47 0.80 0.32 199 TR_XM_DK_SendGrid 1205 0.89 0.80 0.93 200 XM_OfRef7 1203 0.41 0.80 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 278888 89.13 94.97 86.42 2 RELAYCOUNTRY_US 263830 82.83 85.15 81.75 3 DKIM_SIGNED 244606 79.87 88.65 75.80 4 XM_DK_Pass 240102 77.59 84.44 74.40 5 DKIM_VALID 236691 76.55 83.44 73.35 6 XM_B_Unicode 223876 73.55 82.54 69.37 7 DCC_CHECK_NEGATIVE 196709 48.62 22.05 60.96 8 BAYES_50 194078 54.42 42.10 60.14 9 DKIM_VALID_AU 190016 61.34 66.64 58.88 10 XMListUnsubscribeExists 155350 55.51 71.39 48.14 11 XM_B_SpammyWords 146595 53.68 71.44 45.43 12 XM_B_Unicode3 133197 44.31 50.83 41.27 13 DCC_CHECK 125830 50.77 76.13 38.99 14 RCVD_IN_MSPIKE_H2 106993 34.16 36.33 33.15 15 T_TM2_M_HEADER_IN_MSG 94521 27.17 22.61 29.29 16 DKIM_VALID_EF 93705 28.72 28.05 29.04 17 HTML_FONT_LOW_CONTRAST 90038 31.41 38.95 27.90 18 LOC_TINY_FONT_1 85220 34.21 51.02 26.41 19 FVGT_m_MULTI_ODD 81320 28.05 34.18 25.20 20 XMSubLong 76161 24.08 25.11 23.60 21 T_KAM_HTML_FONT_INVALID 66885 24.28 31.92 20.73 22 MIME_HTML_ONLY 64152 22.15 27.05 19.88 23 XM_B_SpammyWords2 60766 26.57 43.24 18.83 24 ALL_TRUSTED 48900 10.78 1.38 15.15 25 XM_Multi_Part_URI 41882 16.18 23.07 12.98 26 USER_IN_DEF_DKIM_WL 41438 9.37 1.91 12.84 27 TR_XM_DK_Unsub 38402 14.63 20.51 11.90 28 BAYES_00 37831 8.41 1.28 11.72 29 UNPARSEABLE_RELAY 36327 13.27 17.59 11.26 30 XM_B_PhoneNumber 32538 8.82 6.10 10.08 31 XM_B_Unsub 29830 11.44 16.15 9.24 32 XM_Evil_Numbers_Gen 27786 9.01 9.87 8.61 33 BAYES_60 27403 8.39 8.18 8.49 34 LotsOfNums_01 27200 8.30 8.02 8.43 35 TooManyTo_001 27069 6.94 3.81 8.39 36 TR_XM_DK_Bayes 24800 5.45 0.63 7.68 37 TR_XM_DK_Bayes1 24491 5.38 0.63 7.59 38 FSL_BULK_SIG 22851 7.59 8.70 7.08 39 IN_ZIMBRA_NJ_WHITELIST 22265 4.74 0.09 6.90 40 TR_XM_BayesUnsub 21705 9.38 15.09 6.73 41 TR_XM_DK_Bayes2 21272 4.65 0.47 6.59 42 XM_DKIMWhitelistDomains 20160 4.27 0.03 6.25 43 LOTS_OF_MONEY 19930 8.55 13.67 6.18 44 RCVD_IN_MSPIKE_H3 19498 5.24 3.50 6.04 45 RCVD_IN_MSPIKE_WL 19498 5.24 3.50 6.04 46 T_TooManySym_01 18476 4.62 2.24 5.73 47 XM_H_Long_From01 18092 5.81 6.26 5.61 48 TR_MAX_INTL_RELAY 17764 8.68 15.50 5.50 49 XM_B_Phish_Phrases 17442 6.34 8.36 5.40 50 XM_H_GMP 17114 5.27 5.21 5.30 51 MIME_QP_LONG_LINE 16596 4.34 2.62 5.14 52 BAYES_40 16120 3.89 1.51 5.00 53 XM_DK_Undo_02 15684 15.63 38.80 4.86 54 HTML_IMAGE_RATIO_02 15684 5.68 7.45 4.86 55 XM_PDF 15358 3.45 0.64 4.76 56 ANY_BOUNCE_MESSAGE 14763 3.38 0.80 4.57 57 BOUNCE_MESSAGE 14761 3.38 0.80 4.57 58 RCVD_IN_VALIDITY_SAFE 14407 3.74 2.18 4.46 59 XMStrtUSub 14142 3.95 3.02 4.38 60 XM_UncommonTLD01 13896 4.89 6.14 4.31 61 XM_B_SpammyWords3 13784 7.96 15.89 4.27 62 XMSubMetaSx_00 13370 5.09 7.13 4.14 63 MPART_ALT_DIFF 13370 4.90 6.52 4.14 64 HTML_IMAGE_RATIO_04 13323 4.36 4.85 4.13 65 RCVD_IN_IADB_LISTED 13013 3.09 1.05 4.03 66 TR_XM_SpammyWords4 12885 6.57 12.12 3.99 67 BAYES_20 12692 3.03 1.08 3.93 68 RELAYCOUNTRY_META 12106 7.04 14.12 3.75 69 T_REMOTE_IMAGE 11940 3.09 1.78 3.70 70 RCVD_IN_IADB_SPF 11491 2.71 0.88 3.56 71 RCVD_IN_VALIDITY_CERTIFIED 11356 2.85 1.40 3.52 72 BAYES_80 10885 5.28 9.39 3.37 73 BOTNET_IPINHOSTNAME 10632 5.87 11.42 3.29 74 MAILING_LIST_MULTI 10441 2.84 1.99 3.24 75 HTML_IMAGE_RATIO_06 10339 3.27 3.41 3.20 76 RCVD_IN_IADB_SENDERID 10232 2.42 0.81 3.17 77 RCVD_IN_IADB_DK 9863 2.35 0.83 3.06 78 TooManyTo_002 9437 2.31 0.99 2.92 79 BAYES_99 9434 11.09 28.66 2.92 80 HTML_MIME_NO_HTML_TAG 9174 2.46 1.63 2.84 81 XMNumbers 9091 2.97 3.30 2.82 82 T_TooManySym_02 9084 2.15 0.73 2.81 83 RCVD_IN_IADB_VOUCHED 8618 2.01 0.59 2.67 84 MIME_HTML_ONLY_MULTI 7970 2.90 3.83 2.47 85 DKIM_INVALID 7915 3.33 5.21 2.45 86 XM_B_SpammyTLD 7855 2.97 4.11 2.43 87 XM_Body_Dirty_Words 7622 4.85 10.22 2.36 88 BAYES_05 7389 1.72 0.51 2.29 89 INVALID_MSGID 7379 1.64 0.24 2.29 90 XM_CamelCaseFrm001 7363 2.70 3.59 2.28 91 BAYES_999 6999 8.27 21.41 2.17 92 BAYES_95 6872 3.20 5.51 2.13 93 TR_XM_DKIM_Undo 6568 10.14 27.60 2.04 94 HTML_IMAGE_RATIO_08 6561 2.51 3.52 2.03 95 MIME_HTML_MOSTLY 6526 2.30 2.90 2.02 96 TM2_M_URI_OPT_OUT 6223 2.17 2.69 1.93 97 TO_MALFORMED 6199 1.32 0.01 1.92 98 KHOP_HELO_FCRDNS 6138 1.60 0.95 1.90 99 TR_XM_SpammyRelay 6126 4.73 10.84 1.90 100 XM_B_URI_Unicode 6100 2.14 2.68 1.89 101 RCVD_IN_IADB_OPTIN 6046 1.38 0.31 1.87 102 XM_DK_Undo_01 5776 1.85 1.97 1.79 103 T_XMDrugObfuBody_14 5574 2.50 4.15 1.73 104 URI_NOVOWEL 5413 1.45 0.97 1.68 105 TR_XM_PhishingBody 5323 2.62 4.70 1.65 106 TooManyTo_003 5233 1.39 0.90 1.62 107 FROM_EXCESS_BASE64 5210 1.91 2.56 1.61 108 TM2_M_VERY_LONG_WORD 5113 2.40 4.16 1.58 109 XM_SPF_SoftFail 5061 2.40 4.20 1.57 110 T_XMDrugObfuBody_08 5040 2.06 3.14 1.56 111 BOTNET 5036 3.84 8.75 1.56 112 UNTRUSTED_Relay 4944 2.66 5.10 1.53 113 XM_B_Investor 4926 2.67 5.13 1.53 114 IN_HORDE_ADDRESS_BOOK 4835 1.06 0.12 1.50 115 XMDiploma_00 4659 2.10 3.50 1.44 116 TR_XM_UnparsRelay 4628 3.60 8.26 1.43 117 XM_B_Unsub2 4544 1.66 2.19 1.41 118 TR_Symld_Words 4521 1.25 0.93 1.40 119 XM_SendGrid 4468 1.45 1.60 1.38 120 XMGappySubj_01 4435 0.99 0.16 1.37 121 URI_HEX 4303 1.46 1.73 1.33 122 TR_XM_SpammyWords5 4161 1.92 3.26 1.29 123 SUBJ_ALL_CAPS 4105 1.33 1.46 1.27 124 XMCapTrack 4069 1.00 0.43 1.26 125 XMSexyCombo_05 4012 2.28 4.50 1.24 126 XM_GoogleGroups 3992 1.05 0.65 1.24 127 HELO_NODOT 3966 0.93 0.29 1.23 128 HELO_NO_DOMAIN 3958 0.93 0.29 1.23 129 XM_H_Long_From02 3806 1.43 1.95 1.18 130 TooManyTo_004 3760 1.07 0.86 1.17 131 TVD_SPACE_RATIO 3724 0.82 0.11 1.15 132 T_TVD_MIME_NO_HEADERS 3642 0.78 0.04 1.13 133 XM_OfRef6 3627 1.86 3.46 1.12 134 RELAYCOUNTRY_CA 3309 2.16 4.61 1.03 135 T_TooManySym_03 3205 0.75 0.24 0.99 136 RCVD_IN_BL_SPAMCOP_NET 3156 4.37 11.66 0.98 137 TR_DCC_Bayes_99 3135 7.28 20.85 0.97 138 FROM_GOV_DKIM_AU 3113 0.72 0.18 0.96 139 XM_UB50 3089 1.42 2.41 0.96 140 XMStockSpam_06 3049 1.35 2.23 0.94 141 T_FILL_THIS_FORM_SHORT 3042 1.08 1.38 0.94 142 TooManyTo_005 3036 0.91 0.83 0.94 143 TR_XM_DK_SendGrid 3010 0.89 0.80 0.93 144 SpammyFromTLD_01 2836 1.13 1.67 0.88 145 TR_MetaPhish_Combo_01 2797 0.89 0.95 0.87 146 DKIM_ADSP_CUSTOM_MED 2778 1.06 1.50 0.86 147 XMGappySubj_02 2768 0.60 0.04 0.86 148 XMBody_95 2764 0.64 0.19 0.86 149 T_XMDrugObfuBody_00 2671 1.47 2.84 0.83 150 XMBrknScrpt_02 2657 1.12 1.75 0.82 151 XMHTML_After_End 2617 0.86 0.96 0.81 152 XMGenDplmaNmb 2587 1.12 1.82 0.80 153 MPART_ALT_DIFF_COUNT 2574 0.84 0.93 0.80 154 HTTPS_HTTP_MISMATCH 2537 0.91 1.17 0.79 155 XM_B_COPY_HTML 2475 1.01 1.54 0.77 156 URI_TRY_3LD 2452 1.26 2.34 0.76 157 XM_ProductURIs 2430 0.85 1.06 0.75 158 XMNoVowels 2368 0.64 0.45 0.73 159 XM_ShortIntro_01 2361 0.64 0.44 0.73 160 RCVD_IN_PBL 2321 0.74 0.79 0.72 161 XM_H_PHPMailer 2266 0.67 0.61 0.70 162 XM_B_DNDMA 2217 0.76 0.91 0.69 163 TVD_RCVD_IP 2177 0.71 0.77 0.67 164 HTML_TAG_BALANCE_BODY 2101 0.92 1.50 0.65 165 RELAYCOUNTRY_AU 2097 1.33 2.81 0.65 166 T_Symld_Words_02 2095 0.73 0.90 0.65 167 XMMoneyMeta_00 2084 0.68 0.77 0.65 168 T_XMHurry_00 1959 1.27 2.70 0.61 169 NML_ADSP_CUSTOM_MED 1932 0.81 1.26 0.60 170 XM_B_FormFill 1923 0.41 0.03 0.60 171 TR_XM_SPAMCOP 1899 3.41 9.48 0.59 172 XMBody_78 1826 0.89 1.58 0.57 173 XM_B_SpammyWords4 1767 1.14 2.42 0.55 174 XMPhish30 1762 0.84 1.47 0.55 175 XMLngstWrd_00 1742 0.48 0.36 0.54 176 XMBdyGiftCard01 1723 0.81 1.39 0.53 177 FORGED_GMAIL_RCVD 1708 0.73 1.17 0.53 178 XMBody_17 1681 0.81 1.42 0.52 179 T_OBFU_PDF_ATTACH 1660 0.40 0.17 0.51 180 RELAYCOUNTRY_GB 1609 0.63 0.93 0.50 181 TR_XM_Base64_M1 1570 0.75 1.31 0.49 182 MSGID_FROM_MTA_HEADER 1536 0.35 0.08 0.48 183 XMDateMe_00 1528 0.48 0.48 0.47 184 XMSlimDrugH 1510 0.62 0.94 0.47 185 TO_NO_BRKTS_HTML_ONLY 1495 0.40 0.25 0.46 186 HTML_IMAGE_ONLY_32 1493 0.38 0.20 0.46 187 THIS_AD 1489 0.65 1.05 0.46 188 XMLngstWrd_01 1488 0.41 0.31 0.46 189 TM2_M_OBFU_COMMENT 1468 0.53 0.70 0.45 190 HTML_IMAGE_ONLY_28 1464 0.41 0.30 0.45 191 MISSING_HEADERS 1440 0.59 0.88 0.45 192 FROM_GOV_SPOOF 1408 0.33 0.10 0.44 193 SpammyFromTLD_02 1407 0.95 2.06 0.44 194 XMSubMetaI_00 1400 0.61 1.00 0.43 195 XMPhish14 1381 0.55 0.82 0.43 196 XMOemUri 1342 0.39 0.32 0.42 197 TRACKER_ID 1328 0.30 0.05 0.41 198 PLING_QUERY 1298 0.57 0.92 0.40 199 HTML_IMAGE_ONLY_20 1295 0.46 0.58 0.40 200 LongTLD 1284 0.55 0.87 0.40 ----------------------------------------------------------------------